$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33332e302f32342d3234203d3e20313337373533.roa File: 312e3131382e33332e302f32342d3234203d3e20313337373533.roa (raw, json) Hash identifier: x982Dsqn+vR2z/6TvhWHAme4hKFgQ8OY11jaLy3ZNKc= Subject key identifier: DE:A5:7B:FA:50:7A:F7:93:BB:28:93:50:E5:FA:B5:E1:9F:8C:6E:D2 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 2160937DB4AAD0589392BA0B25F60C24D22BB41C Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33332e302f32342d3234203d3e20313337373533.roa Signing time: Wed 01 Apr 2026 06:45:18 +0000 ROA not before: Wed 01 Apr 2026 06:40:18 +0000 ROA not after: Wed 31 Mar 2027 06:45:18 +0000 asID: 137753 IP address blocks: 1.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 01:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:60:93:7d:b4:aa:d0:58:93:92:ba:0b:25:f6:0c:24:d2:2b:b4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 1 06:40:18 2026 GMT Not After : Mar 31 06:45:18 2027 GMT Subject: CN=DEA57BFA507AF793BB289350E5FAB5E19F8C6ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:3d:45:12:a5:1e:da:0a:4d:ac:e1:4b:24: 83:01:60:72:ee:68:5d:cc:6a:24:ea:5e:6c:49:e0: d6:76:c4:b3:57:d7:e5:7f:b7:49:60:c8:4a:11:fd: 19:93:49:a0:39:46:21:d7:23:9f:21:23:01:5b:7c: 48:53:82:f9:cf:57:89:10:de:31:44:59:5b:88:83: a8:ba:26:07:c3:fd:e4:bb:85:38:f7:9b:58:1b:c9: 28:c3:a8:09:1d:c8:09:ee:9e:8e:2c:b0:43:f9:be: ca:c4:34:22:b9:98:21:66:46:57:aa:e9:af:a1:e6: d1:b5:d5:7f:12:b7:93:17:81:60:50:93:fd:73:b1: 66:2f:20:ae:a3:94:b5:24:32:9d:5c:04:5d:4d:00: 73:de:ad:dd:28:53:18:ba:31:4c:fb:57:25:bb:7b: d0:78:a2:e1:ed:cb:63:4f:55:c1:18:8c:bd:80:94: 6b:dd:53:a6:ce:09:7f:65:cd:1c:ea:e3:96:15:3f: f1:b7:c7:c6:a8:7d:e9:60:f0:6e:5c:c0:62:d4:15: 27:8c:5b:54:33:c9:76:12:2b:5e:cb:7b:06:69:44: 71:11:4b:6f:44:13:44:66:d8:24:72:38:79:18:2c: 47:4d:b6:bd:57:78:69:e4:26:06:38:48:ce:59:8f: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A5:7B:FA:50:7A:F7:93:BB:28:93:50:E5:FA:B5:E1:9F:8C:6E:D2 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/312e3131382e33332e302f32342d3234203d3e20313337373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.118.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:13:cc:52:a7:08:f8:49:a0:93:eb:d4:b6:d9:88:25:fc:07: a2:f1:72:0a:93:0a:1a:e9:58:6d:34:82:5f:08:1c:fe:0c:0d: 67:66:d1:ad:78:dc:b0:e8:48:e9:2a:dd:33:68:53:1b:e5:95: 17:0c:43:39:a8:20:6e:f0:e1:e0:2f:9a:13:df:2a:8e:3a:70: f2:93:d2:54:bf:20:06:38:49:54:46:e6:63:b6:1a:6a:6f:dc: 79:4d:2a:86:b4:7e:75:bb:08:8f:23:73:c8:f8:25:2e:36:b3: 0b:0c:63:74:3e:d8:28:d4:b2:a5:b3:f5:a3:2c:70:6c:79:9b: a1:f4:ca:98:b1:3a:9c:ce:69:dd:70:ed:8c:96:2e:31:b2:8b: b6:f5:28:a1:7a:fd:d1:f0:33:fc:da:af:93:00:95:66:b4:94: 1c:99:72:6a:b8:e6:aa:fc:a9:e1:45:c0:04:52:c5:a0:e0:21: a3:2a:8d:0e:42:4f:00:45:41:45:9b:0e:4a:77:f6:dc:7b:fa: 3d:60:ff:92:a9:c7:45:ff:fb:6d:fb:2c:a5:91:3e:72:3b:f8: cb:f1:3a:6a:22:08:57:b0:10:cc:d3:04:e3:52:5f:c8:37:3b: d4:05:71:aa:11:af:fc:0f:4a:14:71:b7:d8:ec:59:e9:81:32: f1:1f:29:18 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUIWCTfbSq0FiTkroLJfYMJNIrtBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MDEwNjQwMThaFw0yNzAzMzEwNjQ1MThaMDMxMTAvBgNV BAMTKERFQTU3QkZBNTA3QUY3OTNCQjI4OTM1MEU1RkFCNUUxOUY4QzZFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdj1FEqUe2gpNrOFLJIMBYHLu aF3MaiTqXmxJ4NZ2xLNX1+V/t0lgyEoR/RmTSaA5RiHXI58hIwFbfEhTgvnPV4kQ 3jFEWVuIg6i6JgfD/eS7hTj3m1gbySjDqAkdyAnuno4ssEP5vsrENCK5mCFmRleq 6a+h5tG11X8St5MXgWBQk/1zsWYvIK6jlLUkMp1cBF1NAHPerd0oUxi6MUz7VyW7 e9B4ouHty2NPVcEYjL2AlGvdU6bOCX9lzRzq45YVP/G3x8aofelg8G5cwGLUFSeM W1QzyXYSK17LewZpRHERS29EE0Rm2CRyOHkYLEdNtr1XeGnkJgY4SM5Zj1o9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU3qV7+lB695O7KJNQ5fq14Z+MbtIwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEyZTMxMzEzODJl MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzUzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAAF2ITANBgkqhkiG9w0BAQsFAAOCAQEAihPMUqcI+Emgk+vUttmIJfwHovFy CpMKGulYbTSCXwgc/gwNZ2bRrXjcsOhI6SrdM2hTG+WVFwxDOaggbvDh4C+aE98q jjpw8pPSVL8gBjhJVEbmY7Yaam/ceU0qhrR+dbsIjyNzyPglLjazCwxjdD7YKNSy pbP1oyxwbHmbofTKmLE6nM5p3XDtjJYuMbKLtvUooXr90fAz/NqvkwCVZrSUHJly arjmqvyp4UXABFLFoOAhoyqNDkJPAEVBRZsOSnf23Hv6PWD/kqnHRf/7bfsspZE+ cjv4y/E6aiIIV7AQzNME41JfyDc71AVxqhGv/A9KFHG32OxZ6YEy8R8pGA== -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:10 2026 by rpki-client